google login issue Server Error 403

[yuttakarn]

after login google show error


Server Error​

403

Forbidden​

You do not have permission to access this document.

 

[yuttakarn]

2021-04-28 22:55:05	Error		403	GET /connect/google?state=4bc3007656aa6fe86ec8d70cc04d044a&code=4%2F0AY0e-g6zMuUF5pf9qz2YvCfVkJVQtRh8G_pEQtoMHA5p3Sujbg4C3Mrle0Q&scope=profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile HTTP/1.0			1.41 K	Apache SSL/TLS access
				[client 171] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".profile" at ARGS:scope. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "21050"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||imgz.io|F|2"] [data "Matched Data: .profile found within ARGS:scope: profile https:/www.googleapis.com/auth/userinfo.profile"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "imgz.io"] [uri "/connect/google"] [unique_id "YImFWWRVEWVLpuR7uqA"], referer: https://accounts.google.co.th/

 

[JakeSully]

2021-04-28 22:55:05	Error		403	GET /connect/google?state=4bc3007656aa6fe86ec8d70cc04d044a&code=4%2F0AY0e-g6zMuUF5pf9qz2YvCfVkJVQtRh8G_pEQtoMHA5p3Sujbg4C3Mrle0Q&scope=profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile HTTP/1.0			1.41 K	Apache SSL/TLS access
				[client 171] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".profile" at ARGS:scope. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "21050"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||imgz.io|F|2"] [data "Matched Data: .profile found within ARGS:scope: profile https:/www.googleapis.com/auth/userinfo.profile"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "imgz.io"] [uri "/connect/google"] [unique_id "YImFWWRVEWVLpuR7uqA"], referer: https://accounts.google.co.th/

Disable mod_security since that thing causes alot of trouble on alot of php scripts and usualy takes some scripts being exploitet so it blocks it and you get that 403 or 500 internal server error becuase of it.

 

[Rodolfo]

That's correct, Apache HTTP Server mod_security is blocking your request. That module is obsolete, you should disable it.

 

[yuttakarn]

That's correct, Apache HTTP Server mod_security is blocking your request. That module is obsolete, you should disable it.

I try disable mod_security it still not working

 

[Rodolfo]

I try disable mod_security it still not working

If you disabled it then the error should point to something else. You should share that error message.

 

[chithienh9]

sau khi đăng nhập google hiển thị lỗi​

​

​

Lỗi máy chủ​

403

Bị cấm​

Bạn không có quyền truy cập tài liệu này.